user_enabled/tenant_enabled take a bool, not a string